r 



53 



-J 
O 

I 



< 

1 

z 



< 



< 



2 

w 
U 



500 

i 



510a 



510b 



510c 



510n 



520 



r ■\ 






t N 


FIELD 1 . 


FIELD 2 


FIELD 3 




FIELD N 





530 



^ r 



ACTION 



PRIORITY 



<Fig. 5A (CFRICWJKZ) 



501 



510a 



510b 



510c 



520 



530 



, * v * -v— 


A 




f ^ 


, * N 


SRCADP 


DST ADD 


TRANSPORT LEVEL FIELDS 




ACTION 




PRIORITY 



PRTCL 


SRC PORT 


DST PORT 




OTHER 





515a . 515b 515c 



fig. 5® (<mjo^M^ 



502 



510a 510b 510c 510d 510e ■ .520 - 530 • 

^— A A ; A A A A 



< ^" y * > 












r 


a 




128.128* 


128.67.120.84. 


TCP | 


80 


1 


* 


1 BLOCK 


2 



Tig.. 5 c (mjoKj.^1) 



RECEIVED 
PACKET 



PACKET CLASSIFIER - STAGE 1 



STAGE 1 
LOGIC 



610 



STAGE 1 
DATA STRUCTURE 



1600 



RESULT 



PACKET CLASSIFIER - STAGE 2 



STAGE 2 
LOGIC 



620 



STAGE 2 
DATA STRUCTURE 



1700 



ACTION 



Tig. 6 



700 














RECEIVE PACKET 












1 














STAGE 1 






CLASSIFY PACKET BASED 
ON NETWORK PATH 




1 


f 












STAGE 2 






CLASSIFY PACKET BASED 
ON OTHER FIELDS 














f 












APPLY HIGHEST PRIORITY 
ACTION TO PACKET 













^^710 



'~\-/720 



730 



/ "\>740 



r 

Tig. 7 



800 



810a 



810b 



801 < 



802 < 



1 • L_ / 



810c 810d 



LOd 810e 820 830a 830b 



SRC ADD 


DST ADD 


PRTCL 


SRC PORT 


DST PORT 


ACTION 


AB. PR. 


REL. PR. 


































128.128.10.5 


172.128* 


TCP 


21 




ACCEPT 


12 


1 


128.128.105 


172.128* 


TCP 


80 


■ * 


ACCEPT 


13 


2 


128.128.10.5 


172.128* 


TCP 


17 


★ 


BLOCK 


14 


3 


128.128.10.7 


172.128* 


TCP 


21 


* 


ACCEPT 


15 


1 


128.128.10.7 


172.128* 


TCP 


. 80 




ACCEPT 


16 


2 


128.128.10.7 


172.128* 


TCP 


17 


* 


BLOCK 


17 


3 



































Tig. 8 



RECEIVE PACKET 



STAGE 1 

CLASSIFY PACKET BASED ON 
SOURCE/ DESTINATION ADDRESS 
TO FIND A SINGLE, MOST 
SPECIFIC MATCH 



STAGE 2 

CLASSIFY PACKET BASED ON 
TRANSPORT LEVEL FIELDS USING 
TRANSPORT LEVEL SHARING 



1 


f 


APPLY HIGHEST PRIORITY 
ACTION TO PACKET 



TIG. 9 




Tig. 1KB 





. 

aavisa 



■< 

aavisa 



1410 



SOURCE 
ADDRESS 
LOOK-UP 
DATA 
STRUCTURE 



1412 



1420 



DESTINATION 
ADDRESS 
LOOK-UP 
DATA 
STRUCTURE 



1422 




1500 



A(V) 



! R4 




Rl 


D 


Rl • 









: R5 1 


I R6 


R7 


R6 | 


B(\Y*) 


L i ^ 



SRC ADD 



Tig. 15 



1600 



RECEIVED. 
PACKET 



PARALLEL LPM TABLE 



1601 



SRC ADD 
LOOK-UP 
DATA 
STRUCTURE 

161Q 



DST ADD 
LOOK-UP 
DATA 
STRUCTURE 

1620 



SEARCH 
KEYS 



FORWARDING TABLE 



1602 



PRIMARY TABLE 
1630 



SECONDARY 
TABLE 

1640a 



SECONDARY 
TABLE 

1640b 



BIN 
POINTERS 



Tig . i6ji 



X 

w 

Q 
2 



w 

H 

pi 

i 

E 



Ph 

D 



u 

3 J 



3^ 




X 
w 
O 
2 



ft 

H 
Ci 

1 

E 



3 
w 

Ci 

PU 



x 
pu 
Q 
2 



H 

Pi 

& 

E 



.PU 

w 
Pi 

PU 



X 

w 
Q 
2 



w 
a, 

H 
Pi 

5 

E 



Pm 

w 

Pi 
Pu 

s 



X 

w 
Q 
2 



H 

Ci 

& 

E 



x 
E 

§ 

cu 
& 

Q 



X 

w 
O 
2 



w 

H 

E 



pj 

Ci 

I 





X 

w 
Q 
2 



I 

Pi 

E 



3 

w 
ci 

CU 

&5 

Q 



X 


X 


X 


X 


X 


X 




X 




w 


w 


w 


w 


w 




w 


B 


Q 


O 


O 


Q 


O 




Q 


2 


2 


2 


2 


2 


2 




2 


w 


w 


w 


w 


w 


pj 




TYPE 


TYP 


TYP 


TYP 


TYP 


TYP 


TYP 




Oi 


ci 


Pi 


Pi 


Pi 


Pi 




Pi 


5 


5 




s 


i 


s 




s 


















• E 


E 


E 


E 


E 


E 




E 


X 




a 






>< 






E 


PU 




b 


Hi 


n« 






pj 


w 




w ' 


pu 


w 




Pi 


Pi 




Pi 


Pi 


Pi 








(Li 


PU. 


&« 




CU 






u 


U 


u 


u 


U 


U 




u 




ci 


Pi 


Pi 


oi 


ci 






to 


CO 


CO 


cn 


cn 


cn 




cn 









CM 










a- 













1700 



1725 



1725a 



1725b 



1725c 



1719a 



1719b 



1719c 



1725d 



1710 



1725k 



1720 



TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL' FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL.FIELQS 


ACTION . 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 














TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 


TRANSPORT LEVEL FIELDS 


ACTION 


PRIORITY 



BIN1 
1720a 



BIN 2 
1720B 

BIN 3 
1720c 

BIN 4 
1720d 



BINK 
1720k 



<Fig.i7 



1800 



1805^^ 



RECEIVE PACKET 



1810a 



1815a' 



PERFORM LOOK-UP ON SRC ADD 



IDENTIFY LPM ASSOCIATED WITH FULLY- 
SPECIFIED FILTER AND LPM ASSOCIATED 
WITH PARTIALLY-SPECIFIED FILTER (II & 13) 



[ PERFORM LOOK- 


-UPONDSTADD 






IDENTIFY LPM ASSOCIATED WITH FULLY- 
SPECIFIED FILTER AND LPM ASSOCIATED 
WITH PARTIALLY-SPECIFIED FILTER (12 & 14) 



-1810b 



-1815b 



1820a 



1820b 



STAGE 1 



SEARCH PRIMARY TABLE 
USING II AND 12 



SEARCH SECONDARY TABLE 
USING 13 




SEARCH SECONDARY TABLE 
USING 14 



-1820c 



1830' 



ACCESS BIN POINTER(S) 
FROM MATCHING ENTRY IN 
PRIMARY TABLE 



ACCESS BIN POINTER(S) 
FROM MATCHING ENTRY IN 
SECONDARY TABLE 



USE DEFAULT ENTRY (V) 
AND ASSOCIATED 
BIN POINTER(S) 



^wl845 



ir ir \f 



1850' 



1855^^ 



ACCESS BIN IDEN1 


THED BY POINTER 






COMPARE TRANSPORT LEVEL FIELDS OF 
PACKET WITH ENTRIES OF ACCESSED BIN 



STAGE 2 




1870 



Tig. is 




Fig. 19 



RECEIVED 
PACKET 



PARALLEL LPM TABLE 



1601 



SRC ADD 
LOOK-UP 
, DATA . 
STRUCTURE 

1610 



DST ADD 
LOOK-UP 
DATA 
STRUCTURE 

1620 



SEARCH 
KEYS 



FORWARDING TABLE 



1602 



PRIMARY TABLE 
1630 



SECONDARY 
TABLE 

1640a 



SECONDARY 
TABLE 

1640b 



WIDE FILTER TABLE 



BIN 
POINTERS 

fig. 20JL 



1\K 



' 3 



J 



w 
D 
2 



H 
to 

I? 



to 

Q 



3^ 



(8 



W 
D 
2 



to 

w 

to 

U 
to 

CD 




w 
Q 
2 



H 
to 

s 



>< 

w 
to 
to 

65 

Q 



X 
w 
o 
2: 



H 

to 

e 



to 
to 
to 
to 

U 
to 
to 



X 

to 
Q 
2 



H 
to 

s 

E 



2 

to. 



X 

to 
Q 
2 



H 
to 

1 

to 



3 
to 
to 
to 
to 

s 



X 

to 
Q 
2 



H 
to 

1 

to 



X 

I— • 

to 

PU- 
PS 
to 

B 



X 

to 
Q 
2 



H 
to 

I 

to 



to 
to 
to 
to 

fe- 
ci 




Q 

Z 



to 
to 
to 
to 

U 
to 

CO 



Q 
2 



x 
to 

9 

to 
U 

to 

CO 



X 
to 
Q 
2 



g 

to 
to 
to 

U 
to 
m 



Q 
2 



to 

U 
to 

CO 




X 
to 
Q 
2 



H 
to 

i 

to 



3 
to 
to 
to 
to 

fc 
Q 



x 
to 

Q 



3 

to 

S' 

to 

u 

to 

CO 





o. 













>* 




B 


t— i 














vO 










S 


. in 









<8 
o 

■fen 



2100 



GROUP CLASSIHCATION RULES HAVING SAME 
SOURCE-DESTINATION PAIR TO CREATE RULE 
SETS, THE SOURCE-DESTINATION PAIR OF 
EACH RULE SET COMPRISING A FILTER 




ORGANIZE TRANSPORT LEVEL 
(OR OTHER) FIELDS ASSOCIATED WITH EACH 
FILTER INTO A SMALL BIN 



CREATE SOURCE ADDRESS AND DESTINATION 
ADDRESS LOOK-UP DATA STRUCTURES 



DETERMINE FILTER INTERSECTIONS AND UNION 
OF SMALL BINS (i.e., A LARGE BIN) ASSOCIATED 
WITH EACH FILTER INTERSECTION 



DETERMINE INDICATOR FILTERS 






r 


CREATE PRIMARY LOOK-UP TABLE WITH 
FULLY SPECIFIED FILTERS, FULLY SPECIFIED 
FILTER INTERSECTIONS, AND INDICATOR 
FILTERS 




< 




CREATE SECONDARY TABLE FOR FILTERS OF 
FORM (x*, *) AND SECONDARY TABLE FOR 
FILTERS OF FORM (*,y*) 




} 


r 


CREATE SECOND STAGE 
DATA STRUCTURE CONTAINING TRIPLETS 
ASSOCIATED WITH EACH SMALL BIN 
(AND/ OR WITH EACH LARGE BIN) 





2190 



r i 

J CREATE WIDE j. 
j FILTER TABLE ] 



Tig. 2i 



2200 



-2230 



BIN1 
2240a 



BIN 2 
2240b 



BIN I 
2240i 



BIN STORAGE MEMORY 



2300a 


.^-2300 


PROCESSING SYSTEM 
FOR FIRST STAGE 
CODE EXECUTION 

2210 


2300b 


2300c 


2300d 


2300e 




2300f 


1 st STAGE CODE <- 


2300g 














CLASSIFICATION 

CIRCUIT FOR 
SECOND STAGE 

2220 . \ 




23001 


2300m 


2300n 



-2250 



Tig. 22 



SRCPRT. 



PCKT 



V 



DSTPRT, 



PCKT 



X7 
V 



2300 



SRCPRT LB 


SRCPRT^ 


DSTPRT LB 


DSTPRT^ 


ACTION 


PRIORITY 


V> X A J 






^ j 


2311 


V 

2312 


2313 


2314 


2320 


2330 



2310 



Tig. 23 



o 

CN 



so" 



id 



>< 
W 

Q 

2: 



Oi 
w 

5 



X 

E 
w 

Oi 

Oh 

H 

8 



X 

w 
Q 
2 



w 
Oh 



ci 
E 



x 

E . 
w 

Ch 
H 

8 



pa 
Q 
2 



Oh 

Oi 

I 

E 



PU 

ci 



X 

w 
Q 

2 



Oh 



X 

E 
w 
oi 

Ph 
H 

8 



X 

w 
Q 
2 



w 

Oh 



Pi- 
pa 

H 



Ph 
w 

0i 
Ph 

H 

8 



X 

w 

Q 
2 



pu 

Ph 



Oi 
w 



x 

E 
w 

pi 

Ph 




X 
PJ 
Q 
2 



w 

Ph 



Ch 
PU 

s 



X 

E 
w 
Pi 

cn 



X 

Ph 

Q 
2 



ta 
cu 



Ci 

I 

E 



X 

E 
w 

Oh 
Ph 

CO 



X 

pa' 
Q 
2 



pa 

Oh 

e 

p< 

i 

E 



x 
E 
w 

Ci 

Oh 

u 

ci 
cn 



x 
pa 
Q 
2 



pa 

Oh 



Oh 
W 

y 

E 



x 
E 
w 

Oi 

Oh 

U 
Oi 

cn 



x 
pa 
Q 
2 



pa 

Oh 



oi 
pa 



x 

E 
pu 

Oi 
Oh 

u 

oi 
cn 



x 
pa 
P 
2 



pa 

Oh 



oi 
pa 

s 



Ph 

pu 
oi 

Oh 

u 

Oi 

cn 



s 




CM 



x 
pa 
Q 
2 



w 

Oh 



Oi 

pa 



X 

E 

Ph 

H 

8 





X 

ta 
D 
2 



pa 

Ph 

oi 

1 

E 



x 

E 
pa 
ci 

Oh 

u 

ci 
to 







CN 










s 












TP 
CN 





fen 



2700 



SRCPRT P< 



DSTPRT^ 



SRCPRT^ SRCPRT ub 



DSTPRT LB DSTPRT UB 



COMPARATOR CIRCUITRY 
2710 



SRCPRT, a < SRCPRT™ < SRCPRT,, 



COMPARATOR CIRCUITRY 
2720 



DSTPRT. n < DSTPRT^ < DSTPRT. 



UB 



-2713 



-2723 



OUTPUT CIRCUITRY 
2730 




YES 



YES 




2739- 



MATCH 
FAILED 
SIGNAL 



~2737 



MATCH 
SIGNAL 



2739- 



MATCH 
FAILED 
SIGNAL 



Tig. 27 



2800 



2805""^ 


: 


RECEIVE PACKET 


} 










2810a 




PERFORM LOOK-UP ON SRC ADD 








\ 


1 



2815a" 



IDENT1FY LPM ASSOCIATED WITH FULLY- 
SPECIFIED FILTER AND LPM ASSOCIATED 
WITH PARTIALLY-SPECIFIED FILTER (II & 13) 



T 



[ PERFORM LOOK- 


■UPONDSTADD *J 


\ 




IDENTIFY LPM ASSOCIATED WITH FULLY- 
SPECIFIED FILTER AND LPM ASSOCIATED 
WITH PARTIALLY-SPECIFIED FILTER (12 & 14) 



2810b 



-2815b 



2820a 



. STAGE 1. 



2820b 



SEARCH PRIMARY TABLE 
USING KEY FORMED FROM 
II, 12, AND PROTOCOL 



SEARCH SECONDARY TABLE 
USING KEY FORMED FROM 
13 AND PROTOCOL 




SEARCH SECONDARY TABLE 
USING KEY FORMED FROM 
14 AND PROTOCOL 



-2820c 



NO 



2830^- 



ISSUE COMMAND TO 
CLASSIFICATION CIRCUIT 
FOR MATCHING ENTRY IN 
PRIMARY TABLE 



ISSUE COMMAND TO 
CLASSIFICATION CIRCUIT 
FOR MATCHING ENTRY IN 

SECONDARY TABLE 



ISSUE COMMAND TO 
CLASSIFICATION CIRCUIT 
FOR DEFAULT ENTRY (V) 



-2845 



2850" 



2855 



COPY RULES FROM BIN MEMORY TO 
CLASSIFICATION CIRCUIT 



STAGE 2 



2865^ 




NO 



ISSUE ADDITIONAL COMMAND 
TO CLASSIFICATION CIRCUIT FOR 
OTHER BINS/ RULES 



^w2875 



287CK ~ X "C 



APPLY ACTION TO PACKET 



Tig. 28 



